Homeland 
Security 

Daily Open Source Infrastructure Report 

23 December 2014 

Top Stories 

• A man was charged December 18 with allegedly manufacturing over $2 million in 
counterfeit U.S. currency and shipping around $270,000 to the U.S. from Uganda after he 
was arrested by Ugandan and U.S. authorities. - Associated Press (See item 9 ) 

• The U.S. Centers for Disease Control (CDC) stated December 19 that 28 individuals from 
10 States were sickened, including 5 people who died, in connection with a Listeria 
outbreak linked to caramel apples. - Reuters (See item 20 ) 

• The New York Police Department is investigating more than 15 threats against officers 
posted on social media following the death of 2 officers December 20 who were killed by a 
man after he allegedly broadcasted his intentions to kill police on social media. - CNN (See 
item 30) 

• The U.S. Federal Trade Commission announced December 19 that T-Mobile US will pay 
at least $90 million for overbilling customers with unauthorized charges. - Associated 
Press (See item 36) 
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Energy Sector 



1. December 19, Seattle Times - (Oklahoma) 2 killed, 3 hurt in Oklahoma oil rig 
explosion. Two workers were killed and three others were injured in an explosion and 
fire on the deck of a Pablo Energy-owned oil rig near Coalgate, Oklahoma, December 
19. Authorities are investigating the cause of the explosion. 

Source: http://seattletimes.com/html/nationworld/2025269118 apxoilrigexplosion.html 

2. December 19, Associated Press - (Wyoming) PacifiCorp Energy pleads guilty in 
bird deaths. The U.S. Department of Justice announced December 19 that Oregon- 
based PacifiCorp Energy will pay $2.5 million in fines after its Wyoming subsidiary 
pleaded guilty to violating the federal Migratory Bird Treaty Act after the discovery of 
more than 370 dead birds at the company’s Seven Mile Hill and Glenrock/Rolling Hills 
wind projects in Carbon and Converse counties from 2009 to 2014. 

Source: http://www.parkrecord.com/letters-to-the-editor/ci 27171992/pacificorp- 
energy-pleads-guilty-bird-deaths 

3. December 19, U.S. Environmental Protection Agency - (National) EPA announces 
first national regulations to safeguard disposal of coal ash. The U.S. Environmental 
Protection Agency announced national regulations for the safe disposal of coal ash 
from coal-fired plants December 19, which includes safeguards to protect communities 
from coal ash impoundment failures and to prevent groundwater contamination and air 
emissions from coal ash disposal. 

Source: 

http://vosemite.epa.gov/QPA/ADMPRESS.NSF/d0cf6618525a9efb85257359003fb69d/ 

8dlb001db717edbf85257db3006b2747 



For another story, see item 33 
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Chemical Industry Sector 

See item 33 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. December 19, Detroit News - (National) Chrysler recalls 280,000 trucks in for axle 
failures. Chrysler announced a recall December 19 for around 257,000 model year 



- 2 - 



2005 Dodge Ram 1500 vehicles due to the potential for a pinion nut to cause the rear 
axle to seize or the driveshaft to detach. 

Source: 

http://www.detroitnews.com/storv/business/autos/chrysler/2014/12/19/chrvsler-recalls- 

trucks-axle-failures/20629323/ 



5. December 19, Detroit News - (National) Chrysler expands air bag recall to all of 
U.S. Chrysler announced December 19 that it was expanding its recall of vehicles 
equipped with airbags manufactured by Takata to include around 3.3 million additional 
vehicles, including 2.9 million in the U.S. The airbag inflators can shatter upon airbag 
inflation, potentially sending shrapnel into the passenger compartment. 

Source: 

http://www.detroitnews.com/storv/business/autos/chrvsler/2014/12/19/chrysler- 
expands-airbag-recall/2065937 1/ 

For another story, see item 33 



T Return to top i 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. December 22, U.S. Securities and Exchange Commission - (Massachusetts) SEC 

charges investment manager F-Squared and former CEO with making false 
performance claims. Investment management firm F-Squared Investments agreed 
December 22 to pay $35 million to settle charges filed by the U.S. Securities and 
Exchange Commission that the company engaged in false performance claims for its 
AlphaSector portfolio in order to mislead investors. 

Source: http://www.sec.gov/news/pressrelease/2014-289.html 

7. December 21, Chicago Tribune - (Illinois) FBI: ‘Play-Along Bandit’ hits 6th bank. 
A suspect known as the “Play-Along Bandit” was believed to be responsible for a 
December 20 robbery at an ABC Bank branch in the Austin neighborhood of Chicago, 
the sixth bank robbery linked to the suspect. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-plav-along-bandit- 
hits-west- side-bank-20 141 220-story.html 

8. December 20, Newark Star-Ledger - (New Jersey) Jackson loan officer indicted in 
large-scale mortgage fraud. A Jackson, New Jersey loan officer for an undisclosed 
mortgage company was indicted December 18 for allegedly participating with others in 
a mortgage fraud scheme that cost financial institutions $10 million. The man was also 
charged with submitting falsified paperwork in order to obtain a loan modification for 
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his home. 

Source: 

http://www.ni.com/ocean/index.ssf/2014/12/iackson loan officer indicted in large- 
scale mortgage fraud.html 

9. December 19, Associated Press - (International) Feds: Uganda-based man 
counterfeited $2 million. A man was charged December 1 8 with allegedly 
manufacturing over $2 million in counterfeit U.S. currency and shipping around 
$270,000 to the U.S. from Uganda after he was arrested by Ugandan and U.S. 
authorities December 11. The alleged scheme was detected by bank employees in 
Pittsburgh who identified a counterfeit bill and an investigation found that counterfeits 
were shipped to individuals in Florida, Minnesota, Texas, and Washington. 

Source: https://www.indianagazette.com/news/reg-national-world/feds-ugandabased- 
man-counterfeited-2-million.2 1 169993/ 

For another story, see item 37 
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Transportation Systems Sector 

10. December 21, KXLY 4 Spokane - (Washington) United flight makes emergency 
landing in Spokane. A United Airlines flight from Seattle to Newark, New Jersey, 
made an emergency landing at Spokane International Airport December 21 after the 
aircraft lost power to an engine and landed with the remaining engine under power. The 
plane landed safely and passengers were awaiting a replacement plane. 

Source: http://www.kxly.com/news/spokane-news/united-flight-makes-emergency- 
landing-in-spokane/30347230 

11. December 20, WIT1 6 Milwaukee - (Wisconsin) Two hurt after driver loses control 
of milk truck, overturns and strikes car. A semi-truck carrying milk overturned and 
struck a car traveling in the opposite direction of Highway 20 in Walworth County, 
prompting the closure of a portion of the highway for approximately 6 hours December 
18. 

Source: http://fox6now.com/2014/12/20/two-hurt-after-driver-loses-control-of-milk- 
truck-overturns-and-strikes-car/ 

12. December 20, Green Bay Press-Gazette - (Wisconsin) Wis. 32 reopens following 
Pulaski manure spill. A portion of Wisconsin 32 near Pulaski was closed for 6 hours 
December 20 after a semi-truck carrying about 4,000 gallons of manure overturned and 
spilled its load onto the roadway, leaking an unknown amount of manure into a nearby 
creek. 

Source: http://www.greenbaypressgazette.com/story/news/local/2014/12/20/manure- 
truck-crash-spill-closes-wis-near-pulaski/207001 1 1/ 

13. December 19, Bergen County Record - (New Jersey) Police: North Jersey ‘Conrail 
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Boyz’ gang busted; 10 accused of stealing from freight trains. The Hudson County 
Prosecutor’s Office announced the arrest of 10 people affiliated with the “Conrail 
Boyz” gang December 18 who allegedly raided CSX and Norfolk Southern trains 
throughout North Jersey stealing high-end clothing, designer shoes, watches, cologne, 
liquor, and electronics. Authorities found the stolen property along with U.S. currency 
during their investigation. 

Source: http://www.northiersev.com/news/police-north-iersev-conrail-boyz-gang- 
busted-10-accused-of-stealing-from-freight-trains- 1.1 170929 

14. December 19, KCBD 11 Lubbock - (Texas) Sick passenger dies after emergency 
landing at Lubbock airport. An American Airlines flight en route to Dallas/Fort 
Worth International Airport from Phoenix Sky Harbor Airport was diverted to Lubbock 
Preston Smith International Airport for an emergency landing December 1 8 due to an 
ill passenger on board. The passenger was removed from the plane and the flight 
continued on to Dallas. 

Source: http://www.kcbd.com/storv/27670285/l-dead-after-emergency-landing-at-lia 

15. December 19, Times of Northwest Indiana - (Indiana) Coal cars derail causing 
delays, rail damage. A Chicago South Shore South Bend Railroad freight train 
derailed and knocked about 6 cars loaded with coal off the tracks and into several 
electrical poles in Michigan City December 19. South Shore Railroad commuter trains 
were delayed for 2 hours due to the derailment while crews worked to repair power 
lines. 

Source: http://www.nwitimes.com/news/local/laporte/rnichigan-city-freight-train- 
derailment-disrupts-south-shore-service/article c9e62b01-1744-5074-a3e5- 
648a96eddee0.html 



16. December 18, KNSD 39 San Diego - (California) 76 E open after overturned big rig 
blocked traffic. State Route 76 East in Oceanside was closed after the driver of a UPS 
semi-truck lost control and overturned December 18, causing eastbound lanes to be 
closed for more than 7 hours while officials worked to clear the road. 

Source: http://www.nbcsandiego.com/news/local/Overtumed-Big-Rig-Blocks-Traffic- 
on-76-E-286227561.html 
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Food and Agriculture Sector 

17. December 22 U.S. Food and Drug Administration - (National) Perfect Bar & 
Company recalls Peanut Butter and Cranberry Crunch nutrition bars due to 
possible health risk. The U.S. Food and Drug Administration reported December 19 
that Perfect Bar & Company recalled certain lots of its Peanut Butter, Cranberry 
Crunch, and Variety Pack nutrition bar products due to possible Salmonella 
contamination that was detected during routine product testing by the company. The 
affected product has reached the distributor, retail, and end user levels nationwide. 
Source: http://www.fda.gov/Safety/Recalls/ucm427672.htm 
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18. December 21, Wausau Daily Herald - (Wisconsin) Police: Man set fire to employer's 
buildings. Police arrested a man December 21 for allegedly setting fire to two large 
outbuildings on his employer’s potato farm in Marathon County after he barricaded 
himself in one of the structures following a two-county chase by police that was 
initiated by reports of a domestic dispute. The suspect allegedly set fire to the structures 
then crashed his vehicle through one of the buildings before he fled the scene. 

Source: http://www.wausaudailvherald.com/story/news/crime/2014/12/21/man- 
arrested-lighting-fire-chase/20723835/ 

19. December 20, KTVA 11 Anchorage - (Alaska) 2 arrested in connection with $30K 
stolen from Alaska fish hatchery. Police arrested two Palmer men December 20 in 
connection with the November 8 theft of $30,000 worth of steel, aluminum, and copper 
from the Eklutna Tailrace fish hatchery in Alaska. The individuals allegedly caused an 
additional $30,000 in damage when they cut through walls to steal wire and access 
locked portions of the building. 

Source: http://www.ktva.com/2-arrested-in-connection-with-30k-stolen-from-alaska- 
fish-hatchery-748/ 

20. December 19, Reuters - (National) Five dead, dozens ill from bacteria linked to 
caramel apples. The U.S. Centers for Disease Control (CDC) stated December 19 that 
28 individuals from 10 States were sickened, including 5 people who died, in 
connection with a Listeria outbreak that is linked to caramel apples. The CDC advised 
against the consumption of all pre-packaged, commercially-produced caramel apples, 
including those with toppings, while officials continue to investigate the outbreak. 
Source: http://www.reuters.com/article/2014/12/19/us-usa-minnesota-listeria- 
idUSKBN0JXlLD20141219 

21. December 19, Princeton Dcdly Clarion - (Indiana) Name released in grain bin death. 
A farmer that was wearing a safety rope while working in a grain bin on his Gibson 
County farm died when the grain that he was shoveling apparently collapsed around 
him. Crews used cut holes in the side of the bin and used a tractor with a vacuum 
system to remove the grain during their effort to rescue the man. 

Source: http://www.tristate-media.com/pdclarion/article 125ccafc-87bb-l Ie4-acb7- 
8fc9da5 647 a5 .html 

22. December 19, U.S. Food and Drug Administration - (National) Reily Foods recalls 
chili seasoning kits due to undeclared peanut and almond allergens. The U.S. Food 
and Drug Administration announced December 19 that Reily Foods Co., issued a recall 
for Carroll Shelby- and Wick Fowler-branded chili seasoning kits after a third party 
supplier informed the company that one or more of the ingredients used for in the 
affected products were contaminated with peanut and almond allergens. The products 
were distributed to retailers nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm427655.htm 

23. December 19, U.S. Food and Drug Administration - (Oregon; Washington) Kkot 
Saem Sprouts, Inc. recalls soybean sprouts and mungbean sprouts because of 
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possible health risk. The U.S. Food and Drug Administration reported December 19 
that Kkot Saem Sprouts, Inc., recalled soybean sprouts and mungbean sprouts sold 
under the Kkot Saem, Winter Blossom Bean Sprouts, and Winter Blossom brands due 
to possible Listeria monocytogenes contamination. The affected products were 
distributed through December 16 to H-Mart stores in Oregon and Washington, and G- 
Mart stores in Oregon. 

Source: http://www.fda.gov/Safety/Recalls/ucm427666.htm 
For another story, see item 12 
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Water and Wastewater Systems Sector 

24. December 20, KHON 2 Honolulu - (Hawaii) Wastewater overflow occurs on Maui. 
The County of Maui’s Department of Environmental Management reported a 
wastewater overflow of approximately 500 gallons December 20 on South Kihei Road 
due to a mechanical failure at the Kihei #5 Pump Station. The wastewater discharged 
into a nearby pond and signs were posted warning the public while crews corrected the 
malfunction and cleaned and disinfected the spill site. 

Source: http://khon2.com/2014/12/20/wastewater-overflow-occurs-on-maui/ 

For another story, see item 33 
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Healthcare and Public Health Sector 

25. December 20, Associated Press - (Illinois) Northwestern Memorial apologizes for 
stolen laptop with patient data. Chicago-based Northwestern Memorial Healthcare 
notified 3,000 patients December 19 of an October 21 theft of a password-protected, 
unencrypted laptop that was stolen from an employee’s vehicle and contained patients’ 
personal information, including Social Security numbers. The health care system took 
steps to enhance security in order to prevent future breaches by encrypting all laptops 
and re-training staff on handling information securely. 

Source: http://chicago.suntimes.eom/business/7/7 1/22 141 1/northwestern-memorial- 
apologizes-stolen-laptop-patient-data 

26. December 19, WBZ 4 Boston - (Massachusetts) Boston Children’s Hospital to pay 
$40,000 fine over data breach. The Massachusetts Attorney General’s office 
announced December 19 that Boston Children’s Hospital agreed to pay a $40,000 fine 
and to improve its security measures following a 2012 data breach that exposed the 
information of over 2,000 patients after an unencrypted laptop was stolen from a 
physician during a conference in Buenos Aires, Argentina. 

Source: http://boston.cbslocal.com/2014/12/19/boston-childrens-hospital-to-pav-40000- 
fine-over-data-breach/ 
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Government Facilities Sector 

27. December 20, U.S. Department of Justice - (Maryland; Virginia) DEA employee 
charged in credit card fraud scheme. The U.S. Department of Justice announced 
December 20 that a U.S. Drug Enforcement Administration (DEA) employee was 
arrested and charged December 1 8 in connection with a scheme to fraudulently obtain 
and use 33 DEA government credit cards from June 2010 through October 2014 while 
she was employed as a DEA Program Manager in Virginia. The suspect allegedly 
submitted applications of individuals not employed with the DEA to acquire 
government-issued credit cards which were used at ATMs in Maryland and Virginia to 
withdraw approximately $115,872. 

Source: http://www.thebaynet.eom/articles/l 214/dea-employee-charged-in-credit-card- 
fraud-scheme.html 

28. December 19, WVEC 13 Hampton - (Virginia) 4 students injured in Virginia Beach 
school bus accident. An accident involving a Virginia Beach School bus and another 
vehicle left four Trantwood Elementary School students injured in Virginia Beach 
December 19. 

Source: http://www.13newsnow.com/storv/news/local/mycitv/virginia- 
beach/2014/12/19/virginia-beach-school-bus-accident/20650743/ 

29. December 19, San Francisco Bay City News - (California) Angel Island closed this 
weekend due to waste water overflow. California State Parks officials announced 
December 19 that San Francisco’s Angel Island State Park will be closed the weekend 
of December 20 due to a waste water system overflow at the park following heavy rains 
in the Bay Area. The park will reopen once the system is operating normally. 

Source: http://www.nbcbavarea.com/news/local/Angel-Island-Closed-This-Weekend- 
Due-to-Waste-W ater-Overflow-2863 897 6 1 .html 

[ Return to top ] 

Emergency Services Sector 

30. December 22, CNN - (New York; Maryland) NYC mayor: Attack on police is an 
attack on all New Yorkers. The New York Police Department is investigating more 
than 15 threats against officers posted on social media platforms following the death of 
2 officers December 20 who were killed by a man in Brooklyn after he allegedly 
broadcasted his intentions to kill police on social media. The suspect was found dead of 
a self-inflicted gunshot wound and authorities tied him to the shooting of an ex- 
girlfriend in Baltimore. 

Source: http://www.cnn.com/2014/12/22/us/new-york-police-officers-killed/index.html 

31. December 21, WIVB 4 Buffalo - (New York) Vandals cause $50K damage to fire 
company. Vandals broke into the Clarksville Volunteer Fire Company station in New 
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York December 20 and caused between $40,000-$50,000 in damages to fire trucks, 
equipment, and other parts of the building. Volunteer firefighters will use equipment 
from other fire companies to fight fires while authorities continue to investigate the 
incident. 

Source: http://wivb.com/2014/12/21/vandals-cause-50k-damage-to-fire-company/ 

32. December 19, WISC 3 Madison - (Wisconsin) Officials: All 911 services restored 
after 7-hour outage. Frontier Communications’ crews repaired a broken fiber optic 
line that was severed by a third party December 18, which knocked out 9-1-1 service to 
nearly 20,000 residents across several southern Wisconsin counties for approximately 7 
hours. Customers were provided with a direct number to dial for emergencies while 
crews worked to repair the damaged line. 

Source: http://www.channel3000.com/news/adams-countv-wis-dells-report-911- 
outage/30295488 
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Information Technology Sector 

33. December 22, Securityweek - (International) Easily exploitable NTP vulnerabilities 
put ICS operators at risk. Researchers with Google’s Security Team identified and 
reported several vulnerabilities in the Network Time Protocol (NTP) which could allow 
low-skilled attackers to crash the NTP daemon or execute arbitrary code using publicly 
available exploits. The Industrial Control Systems Cyber Emergency Response Team 
(ICS-CERT) released an advisory regarding the vulnerabilities due to the wide use of 
NTP within industrial control systems (ICS) deployments. 

Source: http://www.securitvweek.com/easily-exploitable-ntp-vulnerabilities-put-ics- 
operators-risk 

34. December 19, Securityweek - (International) Hackers used sophisticated SMB Worm 
Tool to attack Sony. The United States Computer Emergency Readiness Team (US- 
CERT) issued an advisory and indicators of compromise after attackers were found to 
use a Server Message Block (SMB) Worm Tool in a recent destructive attack against a 
major entertainment company. The SMB Worm Tool contained five components, 
allowing it to compromise systems, enable backdoor access, and destroy hard drive 
contents. 

Source: http://www.securityweek.com/hackers-used-sophisticated-smb-worm-tool- 
attack-sony 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



35. December 21, Bluefield Daily Telegraph - (West Virginia) Arrest made in copper 
theft. Two McDowell County men were arrested December 19 for allegedly stealing 
copper cables that disrupted telephone service for approximately 240 Frontier 
Communications’ customers in the Big Sandy-Hensley area December 16-December 
17. 

Source: http://www.bdtonline.com/news/arrests-made-in-copper- 
theft/article 63bb6440-8896- 1 1 e4-aad2-4778d6c2d7cf.html 

36. December 19, Associated Press - (National) T-Mobile paying at least $90M for 
unwanted services. The U.S. Federal Trade Commission announced December 19 that 
T-Mobile US will pay at least $90 million for overbilling customers for unauthorized 
charges under a settlement with federal regulators after authorities accused the 
company for billing customers for cellphone text services they did not order. 

Source: http://abcnews.go.com/Business/wireStorv/mobile-paving-90m-refunds- 
unwanted-services-277 19411 

37. December 19, Pay son Roundup - (Arizona) Squirrel suspected in service outage. A 
damaged fiber optic cable left thousands of CenturyLink, Suddenlink, Verizon, and 
AT&T customers in Rim Country without telephone, Internet, and TV services for 
nearly 9 hours December 16. Some businesses and banks in the area were forced to 
close due to the loss of service. 

Source: http://www.paysonroundup.com/news/2014/dec/19/squirrel-suspected-service- 
outage/ 
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Commercial Facilities Sector 

38. December 21, St. Paul Pioneer Press - (Minnesota) Mall of America temporarily 
closes stores amid Saturday protest. Several stores on the east side of the Mall of 
America in Bloomington were closed for more than 4 hours December 20 after about 
1,500 individuals gathered in a non-public space for a non-approved demonstration. 
Police arrested at least 20 individuals for various offenses but reported no injuries or 
incidents of violence or theft. 

Source: http://www.duhithnewstribune.com/news/3639488-mall-america-temporarily- 
closes-stores-amid-saturday-protest 

39. December 21, WDEL 1150 AM Wilmington - (Delaware) 1 dead, 2 hurt after fire at 
Harbor House Apartments in Claymont. A December 21 fire at the Harbor House 
Apartments complex in Claymont caused at least $1 million in property damage. One 
resident was killed and 2 others were injured while 38 residents were displaced from 2 
buildings at the complex. 

Source: http://www.wdel.com/story.php?id=64938 



- 10 - 



40. December 21, KNSD 39 San Diego - (California) Westfield North County Mall 
reopens after fire. The Westfield North County Mall in Escondido delayed its opening 
December 21 due to a fire that broke out inside a store which prompted an evacuation 
of employees about 2 hours before the mall’s scheduled opening. At least three stores 
and one restaurant remained closed after the mail was cleared to reopen. 

Source: http://www.nbcsandiego.com/news/local/Fire-Closes-Westfield-North-County- 
Mall-286499161.html 

41. December 21, WIS 10 Columbia - (South Carolina) Community still in shock after 5 
die in Spartanburg apartment fire. Authorities are investigating a December 20 fire 
at the Southern Pines apartment complex in Spartanburg that killed 5 residents and 
displaced an additional 20 residents. 

Source: http://www.wistv.com/story/27679689/communitv-still-in-shock-after-5-die- 
in-spartanburg-apartment-fire 

42. December 19, Associated Press - (Indiana) Indiana stage collapse victims reach 
settlement with Sugarland, Live Nation. Eighteen defendants, including country duo 
Sugarland and concert promoter Live Nation, agreed to pay $39 million to resolve 
claims in connection with 201 1 a stage collapse at the Indiana State Fair that killed 7 
individuals and injured nearly 100 others. An investigation revealed that the stage 
rigging that collapsed did not meet industry safety standards and that fair officials 
lacked an appropriate emergency plan. 

Source: http://www.foxnews.com/us/2014/12/19/lawyers-indiana-stage-collapse- 
victims-reach-settlement-with-sugarland-live/ 

For another story, see item 37 
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Dams Sector 

Nothing to report 
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